Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226821 7.5 危険 PreProject.com - PHP JOBWEBSITE PRO の jobseekers/JobSearch3.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2914 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
226822 6.8 警告 webchamado - WebChamado の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2907 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
226823 6.8 警告 webchamado - WebChamado の lista_anexos.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2906 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
226824 7.5 危険 phpmycart - Conkurent PHPMyCart の shop.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2904 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
226825 7.5 危険 phpauction - PHPAuction の item.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2900 2012-12-20 18:52 2008-06-27 Show GitHub Exploit DB Packet Storm
226826 6.8 警告 wise-ftp - AceBIT WISE-FTP の FTP クライアントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2889 2012-12-20 18:52 2008-06-27 Show GitHub Exploit DB Packet Storm
226827 9.3 危険 rss aggregator - RSS-aggregator の display.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2884 2012-12-20 18:52 2008-06-27 Show GitHub Exploit DB Packet Storm
226828 5 警告 relative real estate systems - Relative Real Estate Systems における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2881 2012-12-20 18:52 2008-06-26 Show GitHub Exploit DB Packet Storm
226829 6.4 警告 yektaweb - AWT YEKTA の rss_getfile.php におけるオープンリダイレクトの脆弱性 CWE-Other
その他 		CVE-2008-2878 2012-12-20 18:52 2008-06-26 Show GitHub Exploit DB Packet Storm
226830 7.5 危険 webdevindo-cms - Webdevindo-CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2875 2012-12-20 18:52 2008-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210971 7.2 HIGH
Network 		cpanel cpanel cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell (SEC-545). NVD-CWE-noinfo
CVE-2020-10120 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210972 9.8 CRITICAL
Network 		cpanel cpanel cPanel before 84.0.20 allows a demo account to achieve remote code execution via a cpsrvd rsync shell (SEC-544). NVD-CWE-noinfo
CVE-2020-10119 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210973 9.1 CRITICAL
Network 		cpanel cpanel cPanel before 84.0.20 allows a demo account to modify files via Branding API calls (SEC-543). NVD-CWE-noinfo
CVE-2020-10118 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210974 9.1 CRITICAL
Network 		cpanel cpanel cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace (SEC-542). NVD-CWE-noinfo
CVE-2020-10117 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210975 5.3 MEDIUM
Network 		cpanel cpanel cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls (SEC-541). CWE-862
 Missing Authorization 		CVE-2020-10116 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210976 7.2 HIGH
Network 		cpanel cpanel cPanel before 84.0.20, when PowerDNS is used, allows arbitrary code execution as root via dnsadmin. (SEC-537). NVD-CWE-noinfo
CVE-2020-10115 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210977 6.1 MEDIUM
Network 		cpanel cpanel cPanel before 84.0.20 allows stored self-XSS via the HTML file editor (SEC-535). CWE-79
Cross-site Scripting 		CVE-2020-10114 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210978 6.1 MEDIUM
Network 		cpanel cpanel cPanel before 84.0.20 allows self XSS via a temporary character-set specification (SEC-515). CWE-79
Cross-site Scripting 		CVE-2020-10113 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
210979 9.8 CRITICAL
Network 		gitlab gitlab GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server side request forgery risk. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-10077 2024-11-21 13:54 2020-03-14 Show GitHub Exploit DB Packet Storm
210980 6.1 MEDIUM
Network 		gitlab gitlab GitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered when displaying merge requests. CWE-79
Cross-site Scripting 		CVE-2020-10076 2024-11-21 13:54 2020-03-14 Show GitHub Exploit DB Packet Storm